CVE-2021-36169

4.2MEDIUM

Key Information:

Vendor
Fortinet
Status
Fortinet FortiOS
Vendor
CVE Published:
13 December 2021

Summary

A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write operations.

Affected Version(s)

Fortinet FortiOS FortiOS 7.0.0, 6.4.6, 6.2.9

References

https://fortiguard.com/advisory/FG-IR-21-091
x_refsource_CONFIRM

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.